<div dir="ltr">Hi guys,<div><br></div><div>I was away from Barbican for a couple of month but I still come back has the same issue.</div><div><br></div><div>As mentioned in the original email, <span style="font-size:12.8px">I went through </span><a href="https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer" target="_blank" style="font-size:12.8px">https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer</a><span style="font-size:12.8px"> with devstack. And all my branches were set to stable/mitaka.</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">If I set my user and tenant as "admin admin", the workflow passed. But it failed if I set the </span><span style="font-size:12.8px">user and tenant to "admin demo", and rerun all the steps.</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Is there anything I was missing from the docs?</span></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">Steps to reproduce:</span></div><div><ol><li><span style="font-size:12.8px">source ~/devstack/openrc admin demo</span><br></li><li><span style="font-size:12.8px">barbican secret store --payload-content-type='text/plain' --name='certificate' --payload="$(cat server.crt)"</span><br></li><li><span style="font-size:12.8px">barbican secret store --payload-content-type='text/plain' --name='private_key' --payload="$(cat server.key)"</span><br></li><li><span style="font-size:12.8px">barbican secret container create --name='tls_container' --type='certificate' --secret="certificate=$(barbican secret list | awk '/ certificate / {print $2}')" --secret="private_key=$(barbican secret list | awk '/ private_key / {print $2}')"</span><br></li><li><span style="font-size:12.8px">neutron lbaas-loadbalancer-create $(neutron subnet-list | awk '/ private-subnet / {print $2}') --name lb1</span><br></li><li><span style="font-size:12.8px">neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container=$(barbican secret container list | awk '/ tls_container / {print $2}')</span><br></li></ol></div><div><span style="font-size:12.8px"><br></span></div><div><span style="font-size:12.8px">The error msg I got is </span></div><div><blockquote style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-style:solid;border-left-color:rgb(204,204,204);padding-left:1ex" class="gmail_quote"><span style="font-size:12.8px">$ neutron lbaas-listener-create --loadbalancer 738689bd-b54e-485e-b742-57bd6e812270 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener2 --default-tls-container=$(barbican secret container list | awk '/ tls_container / {print $2}')<br></span><span style="font-size:12.8px">WARNING:barbicanclient.barbican:This Barbican CLI interface has been deprecated and will be removed in the O release. Please use the openstack unified client instead.<br></span><span style="font-size:12.8px">DEBUG:stevedore.extension:found extension EntryPoint.parse('table = cliff.formatters.table:TableFormatter')<br></span><span style="font-size:12.8px">DEBUG:stevedore.extension:found extension EntryPoint.parse('json = cliff.formatters.json_format:JSONFormatter')<br></span><span style="font-size:12.8px">DEBUG:stevedore.extension:found extension EntryPoint.parse('csv = cliff.formatters.commaseparated:CSVLister')<br></span><span style="font-size:12.8px">DEBUG:stevedore.extension:found extension EntryPoint.parse('value = cliff.formatters.value:ValueFormatter')<br></span><span style="font-size:12.8px">DEBUG:stevedore.extension:found extension EntryPoint.parse('yaml = cliff.formatters.yaml_format:YAMLFormatter')<br></span><span style="font-size:12.8px">DEBUG:barbicanclient.client:Creating Client object<br></span><span style="font-size:12.8px">DEBUG:barbicanclient.containers:Listing containers - offset 0 limit 10 name None type None<br></span><span style="font-size:12.8px">DEBUG:keystoneclient.auth.identity.v2:Making authentication request to <a href="http://192.168.100.148:5000/v2.0/tokens">http://192.168.100.148:5000/v2.0/tokens</a><br></span><span style="font-size:12.8px">INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 192.168.100.148<br></span><span style="font-size:12.8px">Starting new HTTP connection (1): 192.168.100.148<br></span><span style="font-size:12.8px">DEBUG:requests.packages.urllib3.connectionpool:"POST /v2.0/tokens HTTP/1.1" 200 3924<br></span><span style="font-size:12.8px">DEBUG:keystoneclient.session:REQ: curl -g -i -X GET <a href="http://192.168.100.148:9311">http://192.168.100.148:9311</a> -H "Accept: application/json" -H "User-Agent: python-keystoneclient"<br></span><span style="font-size:12.8px">INFO:requests.packages.urllib3.connectionpool:Starting new HTTP connection (1): 192.168.100.148<br></span><span style="font-size:12.8px">Starting new HTTP connection (1): 192.168.100.148<br></span><span style="font-size:12.8px">DEBUG:requests.packages.urllib3.connectionpool:"GET / HTTP/1.1" 300 353<br></span><span style="font-size:12.8px">DEBUG:keystoneclient.session:RESP: [300] Content-Length: 353 Content-Type: application/json; charset=UTF-8 Connection: close<br></span><span style="font-size:12.8px">RESP BODY: {"versions": {"values": [{"status": "stable", "updated": "2015-04-28T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.key-manager-v1+json"}], "id": "v1", "links": [{"href": "<a href="http://192.168.100.148:9311/v1/">http://192.168.100.148:9311/v1/</a>", "rel": "self"}, {"href": "<a href="http://docs.openstack.org/">http://docs.openstack.org/</a>", "type": "text/html", "rel": "describedby"}]}]}}</span><span style="font-size:12.8px"><br></span><span style="font-size:12.8px">DEBUG:keystoneclient.session:REQ: curl -g -i -X GET <a href="http://192.168.100.148:9311/v1/containers">http://192.168.100.148:9311/v1/containers</a> -H "User-Agent: python-keystoneclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}203d7de65f6cfb1fb170437ae2da98fef35f0942"<br></span><span style="font-size:12.8px">INFO:requests.packages.urllib3.connectionpool:Resetting dropped connection: 192.168.100.148<br></span><span style="font-size:12.8px">Resetting dropped connection: 192.168.100.148<br></span><span style="font-size:12.8px">DEBUG:requests.packages.urllib3.connectionpool:"GET /v1/containers?limit=10&offset=0 HTTP/1.1" 200 585<br></span><span style="font-size:12.8px">DEBUG:keystoneclient.session:RESP: [200] Connection: close Content-Type: application/json; charset=UTF-8 Content-Length: 585 x-openstack-request-id: req-aa4bb861-3d1d-42c6-be3d-5d3935622043<br></span><span style="font-size:12.8px">RESP BODY: {"total": 1, "containers": [{"status": "ACTIVE", "updated": "2016-06-10T01:14:45", "name": "tls_container", "consumers": [], "created": "2016-06-10T01:14:45", "container_ref": "<a href="http://192.168.100.148:9311/v1/containers/4ca420a1-ed23-4e91-a08a-311dad3df801">http://192.168.100.148:9311/v1/containers/4ca420a1-ed23-4e91-a08a-311dad3df801</a>", "creator_id": "9ee7d4959bc74d2988d50e0e3a965c64", "secret_refs": [{"secret_ref": "<a href="http://192.168.100.148:9311/v1/secrets/c96944b3-174e-418f-8598-8979eafaa537">http://192.168.100.148:9311/v1/secrets/c96944b3-174e-418f-8598-8979eafaa537</a>", "name": "certificate"}, {"secret_ref": "<a href="http://192.168.100.148:9311/v1/secrets/2e25ad05-ecd6-43bd-95fa-046b9cbe2600">http://192.168.100.148:9311/v1/secrets/2e25ad05-ecd6-43bd-95fa-046b9cbe2600</a>", "name": "private_key"}], "type": "certificate"}]}</span><span style="font-size:12.8px"><br></span><span style="font-size:12.8px">DEBUG:barbicanclient.client:Response status 200<br></span><span style="font-size:12.8px">DEBUG:barbicanclient.secrets:Getting secret - Secret href: <a href="http://192.168.100.148:9311/v1/secrets/2e25ad05-ecd6-43bd-95fa-046b9cbe2600">http://192.168.100.148:9311/v1/secrets/2e25ad05-ecd6-43bd-95fa-046b9cbe2600</a><br></span><span style="font-size:12.8px">DEBUG:barbicanclient.secrets:Getting secret - Secret href: <a href="http://192.168.100.148:9311/v1/secrets/c96944b3-174e-418f-8598-8979eafaa537">http://192.168.100.148:9311/v1/secrets/c96944b3-174e-418f-8598-8979eafaa537</a><br></span><span style="font-size:12.8px">TLS container <a href="http://192.168.100.148:9311/v1/containers/4ca420a1-ed23-4e91-a08a-311dad3df801">http://192.168.100.148:9311/v1/containers/4ca420a1-ed23-4e91-a08a-311dad3df801</a> could not be found<br></span><span style="font-size:12.8px">Neutron server returns request_ids: ['req-82d53607-3596-4eeb-b4ac-b96d9f861dc0']</span></blockquote><div><br></div><div>The related barbican-svc log:</div><div>2016-06-10 12:25:26.135 INFO barbican.api.controllers.containers [req-e7b592d4-376a-4729-ad20-5dfe9e93b6a4 d2d0cb2842eb450ebe032d70bcae</div><div>eb3b 9b07426f96574e27a18e596fb15ee5ec] Retrieved container list for project: 9b07426f96574e27a18e596fb15ee5ec</div><div>2016-06-10 12:25:26.137 INFO barbican.api.middleware.context [req-e7b592d4-376a-4729-ad20-5dfe9e93b6a4 d2d0cb2842eb450ebe032d70bcaeeb3b</div><div> 9b07426f96574e27a18e596fb15ee5ec] Processed request: 200 OK - GET <a href="http://192.168.100.149:9311/v1/containers?limit=10&offset=0">http://192.168.100.149:9311/v1/containers?limit=10&offset=0</a></div><div>{address space usage: 215629824 bytes/205MB} {rss usage: 100933632 bytes/96MB} [pid: 4671|app: 0|req: 117/117] 192.168.100.149 () {30 v</div><div>ars in 465 bytes} [Fri Jun 10 12:25:25 2016] GET /v1/containers?limit=10&offset=0 => generated 585 bytes in 155 msecs (HTTP/1.1 200) 4</div><div>headers in 172 bytes (1 switches on core 0) </div></div><div><div>2016-06-10 12:25:28.183 ERROR barbican.model.repositories [req-4aebc499-b92d-4ab1-8b0e-52f12ddabdd2 d2d0cb2842eb450ebe032d70bcaeeb3b d2</div><div>4f00aff0b24f4ea7f37d193129d532] Not found for 8daec3a0-1582-4d59-ba04-be11d0c2d036</div><div>2016-06-10 12:25:28.183 TRACE barbican.model.repositories Traceback (most recent call last):</div><div>2016-06-10 12:25:28.183 TRACE barbican.model.repositories File "/opt/stack/barbican/barbican/model/repositories.py", line 358, in get</div><div>2016-06-10 12:25:28.183 TRACE barbican.model.repositories entity = query.one()</div><div>2016-06-10 12:25:28.183 TRACE barbican.model.repositories File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/orm/query.py", line</div><div> 2699, in one</div><div>2016-06-10 12:25:28.183 TRACE barbican.model.repositories raise orm_exc.NoResultFound("No row was found for one()")</div><div>2016-06-10 12:25:28.183 TRACE barbican.model.repositories NoResultFound: No row was found for one()</div><div>2016-06-10 12:25:28.183 TRACE barbican.model.repositories</div><div>2016-06-10 12:25:28.184 ERROR barbican.api.controllers [req-4aebc499-b92d-4ab1-8b0e-52f12ddabdd2 d2d0cb2842eb450ebe032d70bcaeeb3b d24f00aff0b24f4ea7f37d193129d532] Webob error seen</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers Traceback (most recent call last):</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 102, in handler</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 88, in enforcer</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 144, in content_types_enforcer</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)</div></div><div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 143, in on_post</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers controllers.containers.container_not_found()</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/containers.py", line 36, in container_not_found</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers pecan.abort(404, u._('Not Found. Sorry but your container is in '</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/usr/local/lib/python2.7/dist-packages/pecan/core.py", line 141, in abort</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers exec('raise webob_exception, None, traceback')</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 141, in on_post</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers external_project_id)</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/model/repositories.py", line 364, in get</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers _raise_entity_not_found(self._do_entity_name(), entity_id)</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/model/repositories.py", line 2250, in _raise_entity_not_found</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers id=entity_id))</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers HTTPNotFound: Not Found. Sorry but your container is in another castle.</div><div>2016-06-10 12:25:28.184 TRACE barbican.api.controllers</div><div>2016-06-10 12:25:28.187 INFO barbican.api.middleware.context [req-4aebc499-b92d-4ab1-8b0e-52f12ddabdd2 d2d0cb2842eb450ebe032d70bcaeeb3b d24f00aff0b24f4ea7f37d193129d532] Processed request: 404 Not Found - POST <a href="http://192.168.100.149:9311/v1/containers/8daec3a0-1582-4d59-ba04-be11d0c2d036/consumers/">http://192.168.100.149:9311/v1/containers/8daec3a0-1582-4d59-ba04-be11d0c2d036/consumers/</a></div></div><div><br></div><div><br></div><div><br></div><div>Thank you,</div><div>Jiahao Liang</div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Feb 29, 2016 at 5:07 PM, Madhusudhan Kandadai <span dir="ltr"><<a href="mailto:madhusudhan.openstack@gmail.com" target="_blank">madhusudhan.openstack@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><div>Okay, Figured out the issue.When debugging, I was trying to create lb and barbican clients with different users. Thanks guys!<br></div></div><div class="HOEnZb"><div class="h5"><div class="gmail_extra"><br><div class="gmail_quote">On Mon, Feb 29, 2016 at 2:07 PM, Phillip Toohill <span dir="ltr"><<a href="mailto:phillip.toohill@rackspace.com" target="_blank">phillip.toohill@rackspace.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Is the create LB happening on a different user than the one that created the barbican container? Maybe im not looking at it right, but cant tell from this. </p><span>
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin:0px;padding:0px;border:0px;font-family:Arial,sans-serif;font-size:10px;line-height:10px;vertical-align:top;outline:none;max-width:100%;text-align:right;color:rgb(102,102,102)" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
</span><div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Madhusudhan Kandadai <<a href="mailto:madhusudhan.openstack@gmail.com" target="_blank">madhusudhan.openstack@gmail.com</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:47 PM<div><div><br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</div></div></font>
<div> </div>
</div><div><div>
<div>
<div dir="ltr">Is what I can see the error logs in barbican svc screen while I create TLS listener like this:
<a href="http://paste.openstack.org/show/xVl9iuJtGW03fCGetDm3/" target="_blank">http://paste.openstack.org/show/xVl9iuJtGW03fCGetDm3/</a><br>
<br>
2016-02-29 13:42:55.222 INFO barbican.api.middleware.context [req-65fd0f08-4c1e-4b2f-9cbd-64f186365077 afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Processed request: 404 Not Found - POST
<a href="http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/" target="_blank">
http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/</a><br>
{address space usage: 220770304 bytes/210MB} {rss usage: 101371904 bytes/96MB} [pid: 52558|app: 0|req: 75/75] 192.168.109.129 () {34 vars in 598 bytes} [Mon Feb 29 13:42:55 2016] POST /v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/ => generated
111 bytes in 214 msecs (HTTP/1.1 404) 4 headers in 179 bytes (1 switches on core 0)<br>
2016-02-29 13:43:17.397 ERROR barbican.model.repositories [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Not found for d96dccd5-0d39-4f67-ba3a-366a84cfd371<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories Traceback (most recent call last):<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories File "/opt/stack/barbican/barbican/model/repositories.py", line 354, in get<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories entity = query.one()<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories File "/usr/local/lib/python2.7/dist-packages/sqlalchemy/orm/query.py", line 2699, in one<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories raise orm_exc.NoResultFound("No row was found for one()")<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories NoResultFound: No row was found for one()<br>
2016-02-29 13:43:17.397 TRACE barbican.model.repositories <br>
2016-02-29 13:43:17.398 ERROR barbican.api.controllers [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Webob error seen<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers Traceback (most recent call last):<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 104, in handler<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 90, in enforcer<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/__init__.py", line 146, in content_types_enforcer<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers return fn(inst, *args, **kwargs)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 143, in on_post<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers controllers.containers.container_not_found()<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/containers.py", line 36, in container_not_found<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers pecan.abort(404, u._('Not Found. Sorry but your container is in '<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/usr/local/lib/python2.7/dist-packages/pecan/core.py", line 141, in abort<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers exec('raise webob_exception, None, traceback')<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/api/controllers/consumers.py", line 141, in on_post<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers external_project_id)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/model/repositories.py", line 360, in get<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers _raise_entity_not_found(self._do_entity_name(), entity_id)<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers File "/opt/stack/barbican/barbican/model/repositories.py", line 2173, in _raise_entity_not_found<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers id=entity_id))<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers HTTPNotFound: Not Found. Sorry but your container is in another castle.<br>
2016-02-29 13:43:17.398 TRACE barbican.api.controllers <br>
2016-02-29 13:43:17.403 INFO barbican.api.middleware.context [req-0554f272-f711-49b7-a1f7-3b8bc87b431b afaa5d797f3543369d05e370a543ef9d c141e106a7424d1a8316cf03a8c91e40] Processed request: 404 Not Found - POST
<a href="http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/" target="_blank">
http://192.168.109.129:9311/v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/</a><br>
{address space usage: 220770304 bytes/210MB} {rss usage: 101371904 bytes/96MB} [pid: 52558|app: 0|req: 76/76] 192.168.109.129 () {34 vars in 598 bytes} [Mon Feb 29 13:43:17 2016] POST /v1/containers/d96dccd5-0d39-4f67-ba3a-366a84cfd371/consumers/ => generated
111 bytes in 63 msecs (HTTP/1.1 404) 4 headers in 179 bytes (1 switches on core 0)<br>
<br>
<br>
<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Mon, Feb 29, 2016 at 1:40 PM, Phillip Toohill <span dir="ltr">
<<a href="mailto:phillip.toohill@rackspace.com" target="_blank">phillip.toohill@rackspace.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>To further my thoughts, as Adam mentioned, it could be a user issue, which to me is what it sounds like. So being able to view the config and have other information is pertinent to solving the issue. </p>
<span>
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin:0px;padding:0px;border:0px;font-family:Arial,sans-serif;font-size:10px;line-height:10px;vertical-align:top;outline:none;max-width:100%;text-align:right;color:rgb(102,102,102)" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
</span>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Phillip Toohill <<a href="mailto:phillip.toohill@RACKSPACE.COM" target="_blank">phillip.toohill@RACKSPACE.COM</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:33 PM
<div>
<div><br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</div>
</div>
</font>
<div> </div>
</div>
<div>
<div>
<div>
<div style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>We could use some more information. </p>
<p><br>
</p>
<div>
<div name="divtagdefaultwrapper">
<div>Phillip V. Toohill III</div>
<div>Software Developer</div>
<div><img style="margin:0px;padding:0px;border:0px;font-family:Arial,sans-serif;font-size:10px;line-height:10px;vertical-align:top;outline:none;max-width:100%;text-align:right;color:rgb(102,102,102)" src="http://600a2794aa4ab5bae6bd-8d3014ab8e4d12d3346853d589a26319.r53.cf1.rackcdn.com/signatures/images/rackspace_logo.png"></div>
<div>phone: <a href="tel:210-312-4366" value="+12103124366" target="_blank">210-312-4366</a></div>
<div>mobile: <a href="tel:210-440-8374" value="+12104408374" target="_blank">210-440-8374</a></div>
<div><br>
</div>
</div>
</div>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Madhusudhan Kandadai <<a href="mailto:madhusudhan.openstack@gmail.com" target="_blank">madhusudhan.openstack@gmail.com</a>><br>
<b>Sent:</b> Monday, February 29, 2016 3:21 PM<br>
<b>To:</b> OpenStack Development Mailing List (not for usage questions)<br>
<b>Subject:</b> Re: [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div dir="ltr">Wondering, have you guys figured out this issue? I am seeing the same problem that Jiahao is getting.
<br>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Feb 4, 2016 at 9:53 AM, Adam Harwell <span dir="ltr">
<<a href="mailto:adam.harwell@rackspace.com" target="_blank">adam.harwell@rackspace.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr" style="font-size:12pt;color:#000000;background-color:#ffffff;font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Could you provide your neutron-lbaas.conf? Depending on what version you're using, barbican may not be the default secret backend (I believe this has been fixed). Alternatively, it depends on what user accounts are involved -- this should definitely work
if you are using only the single admin account, but we haven't done a lot of testing around the ACLs yet to make sure they are working (and I believe there is still an outstanding bug in Barbican that would cause the ACLs to not function properly in our use-case).<br>
</p>
<p><br>
</p>
<p> --Adam<br>
</p>
<p><br>
</p>
<div style="color:rgb(33,33,33)">
<hr style="display:inline-block;width:98%">
<div dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Jiahao Liang <<a href="mailto:jiahao.liang@oneconvergence.com" target="_blank">jiahao.liang@oneconvergence.com</a>><br>
<b>Sent:</b> Thursday, January 28, 2016 12:18 AM<br>
<b>To:</b> <a href="mailto:openstack-dev@lists.openstack.org" target="_blank">openstack-dev@lists.openstack.org</a><br>
<b>Subject:</b> [openstack-dev] [Neutron][LBaaS][barbican]TLS container could not be found</font>
<div> </div>
</div>
<div>
<div>
<div>
<div dir="ltr"><span style="font-size:12.8px">Hi community,</span>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">I was going through <a href="https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer" target="_blank">https://wiki.openstack.org/wiki/Network/LBaaS/docs/how-to-create-tls-loadbalancer</a> with devstack.
I was stuck at a point when I tried to create a listener within a loadbalancer with this command:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;padding:9.5px;font-family:Monaco,Menlo,Consolas,'Courier New',monospace;font-size:13px;color:rgb(51,51,51);margin-top:0px;margin-bottom:10px;line-height:20px;word-wrap:break-word;background-color:rgb(245,245,245)">neutron lbaas-listener-create --loadbalancer lb1 --protocol-port 443 --protocol TERMINATED_HTTPS --name listener1 --default-tls-container=$(barbican secret container list | awk '/ tls_container / {print $2}')</pre>
</div>
<div style="font-size:12.8px">But the command failed with output:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;padding:9.5px;margin-top:0px;margin-bottom:10px;word-wrap:break-word;background-color:rgb(245,245,245)"><font face="Monaco, Menlo, Consolas, Courier New, monospace" color="#333333"><span style="font-size:13px;line-height:20px">TLS container <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> could not be found<br></span></font></pre>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">When I run:</div>
<div style="font-size:12.8px">
<pre style="white-space:pre-wrap;font-size:13px;padding:9.5px;font-family:Monaco,Menlo,Consolas,'Courier New',monospace;color:rgb(51,51,51);margin-top:0px;margin-bottom:10px;line-height:20px;word-wrap:break-word;background-color:rgb(245,245,245)">barbican secret container list</pre>
</div>
<div style="font-size:12.8px">I was able to see the corresponding container in the list and the status is active.</div>
<div style="font-size:12.8px">(Sorry, the format is a little bit ugly.....)</div>
<div style="font-size:12.8px">
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| Container href | Name | Created | Status | Type | Secrets | Consumers |</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e34</a> | tls_container | 2016-01-28 04:58:42+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd" target="_blank">http://192.168.100.149:9311/v1/secrets/1bbe33fc-ecd2-43e5-82ce-34007b9f6bfd</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe" target="_blank">http://192.168.100.149:9311/v1/secrets/6d0211c6-8515-4e55-b1cf-587324a79abe</a> |
|</div>
<div>| <a href="http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee" target="_blank">http://192.168.100.149:9311/v1/containers/31045466-bf7b-426f-9ba8-135c260418ee</a> | tls_container2 | 2016-01-28 04:59:05+00:00 | ACTIVE | certificate
| private_key=<a href="http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10" target="_blank">http://192.168.100.149:9311/v1/secrets/dba18cbc-9bfe-499e-931e-90574843ca10</a> | None |</div>
<div>| | | | | | certificate=<a href="http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698" target="_blank">http://192.168.100.149:9311/v1/secrets/23e11441-d119-4b24-a288-9ddc963cb698</a> |
|</div>
<div>+--------------------------------------------------------------------------------+----------------+---------------------------+--------+-------------+-----------------------------------------------------------------------------------------+-----------+</div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Also, if I did a GET method from a RESTful client with correct X-Auth-Token to the url: <span style="font-size:13px;line-height:20px;white-space:pre-wrap;color:rgb(51,51,51);font-family:Monaco,Menlo,Consolas,'Courier New',monospace;background-color:rgb(245,245,245)"><a href="http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3" target="_blank">http://192.168.100.149:9311/v1/containers/d8b25d56-4fc5-406d-8b2d-5a85de2a1e3</a></span>,
I was able to receive the JSON information of the TLS container.</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">
<div><br>
</div>
<div>Anybody could give some advice on how to fix this problem?</div>
<div><br>
</div>
<div>Thank you in advance! </div>
</div>
<div style="font-size:12.8px"><br>
</div>
<div style="font-size:12.8px">Best,</div>
<div style="font-size:12.8px">Jiahao Liang</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
</div></div></div>
</div>
</div>
<br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div>
</div></div><br>__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" rel="noreferrer" target="_blank">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" rel="noreferrer" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br></blockquote></div><br></div>